Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Sync-ALZPolicies - Leverage the Azure-Landing-Zones-Library repo instead of Enterprise-scale? #819

Open
cjtous1 opened this issue Nov 8, 2024 · 2 comments
Assignees
Labels
awaiting response feature request User is suggesting a new feature

Comments

@cjtous1
Copy link

cjtous1 commented Nov 8, 2024

Is your feature request related to a problem? Please describe.
The ALZ team is consolidating azure policies and archetypes into the Azure Landing Zones Library.
Right now, the Sync-ALZPolicies script is using the enterprise-scale repository for its source to sync ALZ policies.

Describe the solution you'd like
Would it be possible to modify Sync-ALZPolicies to leverage the ALZ library instead? This would allow us to specify a specific release from the ALZ library that we want to sync into EPAC.
The ALZ library also contains archetype definitions that can be used to automatically populate the policy assignment files. I am not sure how the current ALZ JSONC files are created, at a glance it looks like they are updated in a different (perhaps manual?) process and added to this repo. I believe leveraging the ALZ library (and then alzlibtool to interact with it) to perform the sync to EPAC would be better and allow clients to sync specific release of ALZ policies in their environment.

@cjtous1 cjtous1 changed the title Sync-ALZPolicy - Leverage the Azure-Landing-Zones-Library repo instead of Enterprise-scale? Sync-ALZPolicies - Leverage the Azure-Landing-Zones-Library repo instead of Enterprise-scale? Nov 8, 2024
@anwather
Copy link
Collaborator

Thanks for this - I might look at doing both - have the normal Sync-ALZPolicies grabbing the latest from the ESLZ repo and providing a parameter to specify a version which can pull from the ALZ library.

The assignments are a different story though - they don't specify in the library which scope gets which policy so that is still something I need to maintain.

@anwather anwather self-assigned this Nov 12, 2024
@anwather anwather added awaiting response feature request User is suggesting a new feature labels Nov 12, 2024
@cjtous1
Copy link
Author

cjtous1 commented Nov 12, 2024

Regarding assignments, there are archetype_definitions in the library here. It shows which policy/policySet is assigned to which archetype. Would that be enough to generate the assignments in EPAC?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
awaiting response feature request User is suggesting a new feature
Projects
None yet
Development

No branches or pull requests

2 participants